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DfSlKhJI'liONM v\Oh;<. ( OWMJ'Mt Vf HA >\s,l \5 WH.f'H M 1WW 
MULTIPLE WIRELESS SERVICE PROVIDERS TO SHARE A COMMON NETWORK 
INFRASTRUCTURE 

5 Background of the Invention 

1. Field of the Invention 

Tiiis invention relates generally to wireless network communication. - , 
method enabling a network infrastructure to support multiple wireless service providers and/or customers of multiple 
wireless service providers. The invention also relates teas < < bl i Inn 

10 a wired » 1 i jtwork system 

2. !> w \ .n , >:J the >!' < grit i* 

Various lypes of wired aim wi < i structures are being developed to service users of computing 
devices, such as portable computing devices (PCDs). Currently, masexcm wireless service providers are attempting 
15 to ins! k infrastructures in u cations, such as airports, hotels, office buildings, shopping 

malls, etc . for use by various users, suck as mobile users (MUs) of PCDs, 

However, when two or more providers install a wireless network infrastructure in a single location, such as 
atl airport, the providers bet i , - domain ltt otner words, (h<t electromagnetic spectrum 

usable by these wireless networks is limited, and if two or more wireless networks are installed in the same location, 
20 this may result in inadequate RF bandwidth for use by each of these networks. 

IEEE 802.11 defines the IEEE standard for wireless Ethernet. IEEE802.il is designed to support multiple 
overlapping wireless local area I .\'s! hi a given coverage area. Each virek io ;ai area network will 

typically include one or more access points (APs) which conjminucate in a wireless fashion with a corresponding 
irij g device of a tiicli ically in . less Ethetnet trans B 802.1 wremly t 

25 System ID (SID) t deel which LAN to use and the r cess point with which to associate 

Currently, only 3 non-overlapping RF channels are available for different wireless service providers. Once 
these channels are used, no further bandwidth, or limited bandwidth, may be available for other providers. 

In the U.S. and most of Europe, only 3 non-overlapping channels are available using 802,11 Direct Spread 
(802,11 DS) (Direct Sequence Spread 8p , . in other geographies, such as France and Japan, only one 

30 channel is available using 802.11 DS. When using Frequency Hopping radios, only one "channel" is de Sotted. The 
use of different r>". ad ng codes" in conjunction with PH radios only obfuscates the co-interference. Once the 
available channels are used, perhaps one by each provider of a wireless infrastructure, no further bandwidth is 
available for other providers without the potential lor harmful co-interference and me resultant reduction in 
available bandwidth. 

35 n a common area, it is 

irabl< ingl sss mfi rt ctoie which may be used by two or more wireless service providers 

(W'SPs). This would allow a plurality of WSPs to utilize c i 

a istomers oi subsaibers, It maj also be desirable to provide a wireless 

infrastructure which can selectively provide different access le vels to users of the system. 
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service to each "vVSP's subscribers, wherein each approach uses a common acnhentieatiaii / acxounting system. A 
common authentication / accounting system involves "tying together" the authentication; / accounting systems of 
each provider, thereby forming a "roansiig consortium", The first approach is called RADIUS (Remote 
5 Authentication Dial In User Sendee), and the second approach is called TACACS-h Typically these consortiums 
tteK i as a common auihentica c iinrms protocol. RADIUS is a protocol defined by the IETF 

RADIUS Working Group for earning bfonratioabetweea network access devices and secarity/accoimting servers, 
and is documented in RFCs 2138 and 2139. TACACS*, a similar protocol developed by Cisco Systems, is also 

n common implementations. 

10 The main advantage of tying the anihenl t i mntit ystems together be tetativi ease of doing so. 

Indeed, RADIUS was designed to support a tiered hierarchy of services providers. However, this seeming ease of 
implementation hide, other sns j fitch rems in unsolved via this approach. Most of these center around the fact 
that RADIUS and TACACS* were designed to support connectivity via a dial-up network {using either modems or 
ISDN). Indeed, the very acronym. "RADII FS ess I ANs are 

15 not "dial-up" by their very nature, several assumptions which are "built-in" to the RADIUS and TACACS+ 
protocols have die potential to limit the type and number of services deployed over wireless LANs. 

RADIUS has its share of security issues as well. The RADIUS protocol is open to a possible dictionary 
attack on "shared .secret" passwords. Discover/ of these can be used to spoof "Access-Accept" packets, with the 
result of ''free service" being granted to the attacker. While this security hole is only possible if the attacker is able 

20 to "sniff' commanications between the RADIUS server and client, wireless networks make this type of unauthorised 
access even more likely. 

However, the most glaring issue associated with using a common authentication / accounting system is feat 
any approach that ties the authentication and accounting systems of a set of WSPs together does nothing to solve 
problems related to "ESSIDs", described below. 
25 As noted above, the IEEE 802.11 specification is a wireless LAN standard developed by the IEEE 

(Institute of Electrical and El n ! in Ite order to specify n rrerihe it u te face between 

a wireless client and a base station or Access Point, as well as among wireless clients. First conceived in 1990, the 
standard has evolved from various Draft versions (Drafts 1 through 6), with approval of the final draft on June 26, 
1997. 

30 The 802.11 MAC layer, supported by an underlying PHY layer, is concerned primarily with rules for 

accessing the wireless medium. Two network architectures are defined: me Infrastructure Network and the Ad Hoc 
Network. The Infrastructure Network is a network architecture for providing commumcation between wireless 
clients and wired network resources. The transmission of data from the wireless to the wired medium is via an 
*oi ""i '1 area is defined b n AP i ^ i ted wireless clients, and together aU fine 

3 5 devices form a Basic Service Set (BSS). 

The IEEE S02.l l protocol also defines an ESSE) (Extended Service Set 3D) that is essentially a network 
rxaw The J ^ % > less LAN infrastructure. Two or more BSSs configured with 

the same ESSID attached to a common distribution system (for instan Eib \N) fot i J 1 
Service Set.) 
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With multiple access points, clients (PCDs) are free to move seamlessly between access points, as long as 
the ESSE) matches. This feature is built into the 802.11 spedficatton. When a client (BCD) starts losing the signal 
eg ns to search the area tor a closer access point Once a new access porn! is 
found, the client initiates aa association with the new access point and a I rti m from the old one. 
5 In public-access networks the ESSID has been commonly used to choose the WSP iafiastmcture with 

which to a te. B 1 i< » problems Each A? can only support one ESS and one associated 

ESSEX Thus, in order for multiple service providers to share a common space, "N sets of APs are needed, where N 
is. the number of service providers. This leads to co-interference, over-subscription of the RF environment and 
resultant lack of available bandwidth, as described above. 

10 The cotnoioniv im„ 1 i i r I ^ <. 1 wjsh to allow roaming .agree on a 

common ESSID foi their wireless networks. While initially this may appear to solve the problem, it also requires 
not only a common authentication system, tat also a common network hurasmicture which connects to the Internet 
and other services. The issues with a common authentication system have been outlined above. There are also 
numerous issues associated with using a common ESSE) to support multiple WSPs in a common network 

15 infrastructure, 

First, a common network infrastructure with a shared ESS ID would result in insufficient network security. 
Since all devices would necessarily be associated with the same network infrastructure, all manner of attacks, both 
active (such as Denial of Service) and passive (e.g. snooping or sniffing) would be possible. 

Second, to rely on coordination of ESSIDs among a potentially large number of WSPs senna questionable 
20 at best As new providers enter the market, each must choose to configure it's APs such that roaming by other 
providers' subscriber t i« I he case can be made that 1 Xn ses to participate m at 

i van ■ n ' xi iet onfi ire dl of its \Bs to support this as yet undefined ESSE). 

Even if these steps are taken, once every WSP has chosen to use the same ESSE), a new problem occurs. 
Unless roaming agreements are global, and every provider agrees to allow each other provider to roam cm its A Ps, 
25 the user of any given sendee cannot brow that his/her WSP(s) provide service in any given area. The user of such a 
service is left to ''guess" at service availability. 

Further, global coordination around a single ESSII) (combined with a common authentication system) does 
not solve the problem An increasing number of enterprises (large and small) are installing 802.11-compliant 
network infeastructees, and equipping Ore employees of these companies with wireless Network Interface Cards 
30 (NICs), Bach of these enterprises will likely define its own ESSID, and possibly an associated WEE (Wired 
Equivalent Privacy) key. Farther still, inexpensive 802.H-compHant APs are now available for the home market 

SSIDs. 

Thus, even if all WSPs select: and co-ordinate on a single ESSID, enterprises (including airlines) and other 
users of 802. f 1 -compliant NICs will need to reconfigure then equipment in order to use any common-ESSED 
35 network pro* i i. ci by th - e WSPs. This would likely be too inconvenient for most users. 

'i i con tnfrastiTreture, only one broadcast domain is possible. For aa IP-based network 

(such as must be supplied to provide connectivity to theMernet), this implies that only one S? address space (and by 
extension, one Dynamic Host Configuration Protocol (DHCP) server) is possible for each location. This implies 
that the WSP who owns the infrastructure (and supplies the connectivity) in each location has an advantage in that 
40 the network connectivity for that WSP's customers will experience better connectivity. Also implied is that any 
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resouree located on the network (such as file car video servers, voice gateway and oi < ired ili 

* suable to ail users of the wireless infrastructure, and thus no service differentiation is 

possible. 

Therefore, it would be desirable to provide a system arid method which enables a common wifeless 
5 network infrastructure (and especially an IEEE 802,11 wireless network infrastructure) to be used by two or more 
wireless .service providers {WSPs). Tins would allow a plurality of service providers to utilize a common set of 
access points to provide service to a potentially overlapping set of customers. This would also provide subscribers 
or users with the ability to more rally utilize the existing network infiastractaie. It would farther be desirable to 
provide a distributed wireless network system which cart selectively provide different access levels ft? users of the 
10 system 

SUMMARY OF THE INVENTION 

One embodiment of the p < i for enabling multiple wiieless 

j ,u j to ti ets (WSPs) to use or provide services on a common wireless network infrastructure. The system and 
15 method can thus provide acce s and/or roarai lislribut i 1 s tktwork -Astern, 

The network system includes a plurality of access points (APs) coupled to a network. The network access 
points include wireless access points, and may also include wired access points. Access points for the network may 
be widely distributed in various facilities, such as airports, mass-transit stations, hotels, and various businesses, such 
as business offices, restaurants, and stores. The network may couple to a wide area network, such as the Internet, A 
20 plurality of wireless service providers (WSPs) or network providers may provide network services, such as Internet 
access, over the network infrastructure. 

In one embodiment, a user, also referred to as a subscriber, may access the network system through a 
portable computing device (PCD) eramg, for example, a wireless network interface card (NIC). When in sufficiently 
close range to an access point, the PCD may wirelessly communicate with the AP in the network system. In one 
25 embodiment, the APs are arranged at known geographic locations and may pin ider. a aphicloi tton information 
location of the AP or the mobile user. 
Each PCD may store identification information which may uniquely indicate at least one wireless service 
jiuralit 1 oviders. The idetiti! igi 

wireless service provider (or providers) to which the user of the PCD is a subscriber. The Menlificati< m in torn ation 
30 may fake various forms, such as a System ID (SID). MAC ID, or other identification winch may be used to identify 
.i I n r der to vhich flu user ha subscribed Vs used herein fit SID may comprise hi SSJD 
(Service Set ID) or an ESSID (Extended Sen-ice Set ID). When the PCD becomes close to an access point, the 
PCD may provide the identification Morrnaiion to the access point, 

Iti otie embodiment each of the access points is oper able to "listen for" or detect identification information, 
35 e.g., System IDs, associated with numerous different providers, contained in "probes" broadcast by PCDs. 
Alternatively, each of the access points maybe operable to broadcast requests for identification information, e.g., 
a] tX wherein the PCDs may respond to this broadcast by providing the 
id itifj ttio) in nmatiot >uch >roadc is K AI''s are known as "beacons". 

When an access pen - the idet hon mforn > torn a PCD of a user, the access point may 
40 determine the appropriate wireless service provider for the port j mpu ng device using the identification 
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infonnation. Tim, the network system is able to recognize and process identif cation in 1 1 

any of fee plurality of possible wireless service providers. In one embodiment, the APs answer all quea es fi tall 
PCDj, i.sen if foe identi'i^ j j rom the PCD does, not mate i on available to that 

particular AP, e-g., even E r 1 >vsmSlE received. 
5 In one ernfoodinjent, the network system may include a memory medium which stores a list of fctarilkafom 

infonmtion mat maps to a corcesponding list of tfae plurality of possible wireless service providers. The memory 
medium nay be comprised in one or more of, or all of, foe access points, or may be comprised in one or marc other 
devices connected to the network, such as a computer system. In this embodiment, determining foe wireless service 
provider for the portable computing device includes accessing foe memory medium and using foe received 

10 identification information to determm wii ies jemce provid J oi example, foe access point or other device 
may use foe received System ID to index into a table to determine foe appropriate WSP. 

The memory medium may also store associated access information. For each of foe wireless sendee 
es, he cess information may include access methods for providing user data to the respective wireless 
service provider, such as a destination IP address of the WSP, The nppmpr, < i 

15 on foe identification itiformation and/or foe determined WSP, Thus, foe identification information may be used to 
determine the appropriate WSP as well as to automatically route network packets or data between that PCD and foe 
appropriate provider. 

The access Mormation stored in foe memory medium may also include an access level which indicates foe 
user's access rights or privilege level, Thus, foe local network or foe WSP may provide various local resources 
20 which, are available to all users regardless of access level, and users with a higher access level may additionally be 
entitled to Internet access. In other environments, all users may receive Internet access, and users wifo a lower 
access level may not be entitled to view or utilize certain or all local network resources on foe network. Thus, 
iq *) foe a s level, the nse '> ivick i vi ia) Titterti " 

access, or may be provided wifo no network services. The access level may also possibly depend on die known 
25 geographic location of fee AP or foe user. For example, foe access level for each user may vary depending on foe 
known geographic location of the AP to which the user is currently associated, or may depend on foe approximate 
geograpfoe location of the user, e.g., may depend on whether foe user is in a certain store or in a secure area. 

In one embodiment, one or more of foe wireless service provider ID and foe access information may be 
provided by foe PCD of the user. Thus, an access point or other device on foe network nay not be requited to 
30 perform a look-up to determine this inf n ti< i e but rafter this information may be provided by foe PCD. 

When foe portable computing device communicates wifo foe access point, network access nay be provided 
to the portable computing device tkough the determined WSP. For example, foe access point may provide foe 
communicated data to a destination based on or specified by foe determined WSP, e.g., may provide or route the 
data to fee determmt virel rvxe provider's site, e.g, 5 to equipment provided by foe WSP. The WS P may then 
35 provide Internet access and/or other network sendees. The WSP will also typically charge a fee for this service. 
The access poini >rc feral >1$ provides foe data to the destination in a secure manner to prevent the data from being 
unintentionally provided to third parties, such as other providers. 

Thus foe wireless network system is useable by subscribers of each of the plurality of possible wireless 
service providers, thereby enabling subscribers to "roam." on various networks, in { ••«.,-. re twofks maintai ted by 
40 other providers, For example, foe plurality of access points may be maintained by a first WSP, and a subscriber of a 
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IV i i >' i)i vork. Alien ly, fee pia c points may 1 

maintained by an independent third party, and subscribers of stay of various WSPs may be recognized ;md allowed 
use of the network „t< may charge subscribers Co- ac or 

maintains the; network. In addition, th 
5 network resources depending on the access or privilege level of the user. This allows WSPs to offer different levels 
of access to customers, possibly based on different service fee levels. This also allows visitors or non-members of a 
network system to be allowed certain netwt 1 services «ich as Internet access, wttkout compromising otfier privates 
J ' ■ resources. 

In one embodiment, the system includes at least one AP with software wfai ! t ble to ptovide 

10 acses pot ionaiity fo 1 o:t )1 . It >t WSPs. The software may implement a "super access point" 
1 ns associations he plural) x esportding pluralii I i * 

IDs, ESSIDs, etc. The AP may be capable of broadcasting or recognising any of the plurality of SffiS, behaving 
appropriately for different SH)S that are received from PCDs of users, and providing network services to each user 
through !:h < iing W'SP. Ti E ) hie to appeal is am one <> piui iiiyofd eren 

1 5 WSP APs, meaning that a stogie AP may "pretend to be" or behave as m access point dedicated to a particular WSP 
for each of a plurality of different WSPs. 

i i L ' t x tere a nprise access 

point functionality implemented in software that appears as a physical AP to a PCD. The plurality of virtual APs or 
"software" APs may be implemented on one or more physical APs, c.g„ on a common set of physical APs. For 
20 example, each physical AP may implement a plurality of virtual APs. Each instance of a virtual AP executes a 
?leto 80 o idshable from a hardware A3 irei t 

Bach virtu iP »i oft' are" AP may include its own BSSH) and may be uniqu 1 . xth a correspoi 
WSP. Thus, each WSP that uses a virtual AP solution would enjoy the illusion dial there was a complete wireless 
iaflastracture available for its exclusive use. In one embodiment, the System ID of each virtual AP may be a variant 
25 of the SID of the physical AP hosting the virtual APs. 

Each of the APs may connect to a "wired" LAN. In one embodiment, ike "wired* LAN supports a VLAN 
I virtual LAN) protocol In order to partition the network, the network system may maintain a binding between the 
ESS1D and IEEE 802.1(a) VLAN tags or their equivalent. This allows a common wired backbone (using VLAN- 
capable Ethernet switches) to supply a secured "virtual LAN" to each WSP. In order to provide service 
30 differentiation and mi < > ce (QoS) to each user of the network, the network system may farther enable 
802. Hp) in these tags. This allows fee proprietor of the network system to provide service level agreements to its 
emsrs, including both other WSPs and, for example, airport tenants. The network architecture described herein 
can scale to support hundreds of these network customers, and thousands of simultaneous users in each location 
ti 1 i i i \s j * t i i m ESS i f 

35 does not match fee BSS2D of any WSP, the network system also allows for a "default" snapping. Users who arrive 
wife a different ESSTJD, e.g., fee BSSID used at their home or enterprise, would have their network data passed to a 
default or selected provider. This provider may present the user wife the opportunity to use the network on a one - 
i basis or may present fee iser with th in fc register vuth the p»o\ sder, perhaps b, qu 4 edit 

eat d information from the user. 
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authentication system of each subscriber to a roaming "clearing hoti.se". The wireless network system described 
herein leverages the 802,! 1 protocol, and is agnostic as to which PHY technology is used. The present system can 
support all of the following 802,1 1 technologies; 

802. 1 1 FH (Frequency Hopping Spread Spectrum @ l-2Mbps in 2AGM) 

802.1 1 DS {Direct Sequencing Spread Spectrum® l-2Mbps in 2.4Ghz) 

802, 1 1(b) (High-rate (1 1Mbps) DSSS in 2.4Chs) 

StC U ui) ( High-rate (50Mbps) FUSS in S.7Ghz) 

Bluetooth (FH£ ' . of the SDP) 

la one embodiment, the physical AP may comprise two radios, one .Direct Spread Coding radio, and one 
I is p»o\ iding multiple PHY layers oa one physical AP. Using the present system, one 
set of APs (tor a given PHY technology) can maximize the coverage in a given space with a nnnimurn of co- 
ii ■ tence. A group of providers can shate th t c t tiding maximum coverage for the superset of the 

subscribers to each service. Bach wireless service provider can leverage their expertise in attracting members and 
providing value-added services or content. 

In addition, each location authority, (e.g., an airport authority) can deal with one "master concession", who 
is pc. pu!)s)bk ior buddinf ami maititaim s) i s the PJ tmrrummm rad sub i 

infrastructure to the other providers. In fact, the location authority can act as the "master concession", should it so 
desire. 

The present! system is also transparent to authentication technology used by any provider. Due to the issues 
raised above, the wireless subscriber technology described herein is not based on RADIUS or TACACS-K Instead, 

inology may use a "single sign-on" technology based on X 509 
teclmologv is 1 h ne ts c < % 1 v l , t t » , ui protection 

The present system is also transparent to the network protocols in-use. While other prtn id ij o< o h* 
assume .in . protocol in-use, the present system allows other protocols (IPX, IPv6, NetBIOS, AHP, 

etc) to be used in the network as they normally would, with the singular exception that these flows take place within 
the virtual LAN provided by the APs and the network backbone. 

Thus the wireless network system described herein enables a common nifrastrucrure io be used by a 
plurality of wireless service providers, and provides a number of advantages over the prior ait 

BRIEF DESCRIPTION OF THE DRAWINGS 

Oilier objects and advantages of the invention will become apparent upon reading the following- detailed 

< r te acc< i 1 a i i vhich 

Figure 1 is a block diagram of one embod tnesif oi i 

Figure 2 is a more detailed block diagram of one embodiment of the wireless network system of Figure 1 ; 
Figure 3 is a block diag j i rabodiniet 1 ie wireless network system of Figure 1; 
Figure 4 is a flowchart diagram illustrating operarion of allowing access to a wireless network system using 
a multiple subscriber model; 

Figure * illustrates An example of a data structure wia i and access 
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Figure 6 illustrates select! < v u re e ei > t k i r i is access levels; 

■ Figure 7 is a flowchart of initial commuoxcation between a PCD and m access point; 
Figure 8 is a flowchart of communications between a PG1> and an access point; and 
Figure 9 is a flowchart of the process of packets arriving from a wired medium to the AP which are 
5 destined for a PCD. , 

While the it . i i<vfcptible to various modifications and alternative forms, specific embodiments 
thereof are shown by way of example in the drawings and will herein be described in detail It should be 
understood, however, that the drawings and detailed description thereto are not Intended: to limit the invention to the 
particular form disclosed, but on the contrary, the intention is to cover alt modifications, equivalents and alternative;; 
1 0 faffing within the spirit and scope of the present invention as defined by the appended claims. 

DE TAILED DESCRIPT ION Off THE EMBOMMKN IS 

faa^orjtioti by Reference 

U.S. Patent Application Serial No. 09/551,291 titled "A Distributed Network Communication System 
15 which Enables Multiple Network Providers to Use a Common Distributed 'Network Infrastructure" and filed cm 
April 18, 2000, whose inventors are Brett B. Ste wart, James W. Thompson and Kathleen E. McClelland is hereby 
incorporated by reference in its entirety as though fully and completely set forth herein. 

U.S. Patent No. 5,835,061 titled "Method and Apparatus for Geographic-Based Commimications Sendee", 
whose inventor is Brett B. Stewart, is hereby incorporated by reference in its entirety as though fully and completely 
20 set forth herein. 

U.S. Patent No. 5,969,678 titled "System for Hybrid Wired and Wireless Geographic-Based 
S< n ice", whose inventor is Brett B. Stewart, is hereby incorporated by reference in its entirety as 
'H i t <' \mp) lely set forth herein. 

U.S. Patent Application Serial No. 09/433,817 titled "Geographic Based Communications Service" and 
25 filed on November 3, 1999, whose inventors are Brett B. Stewart and James Thompson, is hereby incorporated by 
reference in .us entirety as though fully and completely set forth herein. 

U.S. Patent Application Serial No, 09/433,818 titled "A Network Communications Service with an 
Improved Subscriber Model ! ig Digital < ertificates" and filed on November 3, 1999, whose inventors are Brett 
B. Stewart and James Tbotnps n is xtt b; incorporated by reference in its entirety as though folly and completely 
30 set forth herein. 

U.S. Patent Application Serial No. 09/551,309 titled "System and Method for Managing User 
i bates" and filed on April IS, 2000, whose inventors are Brett B. 
Stewart and James I hi rnp i - ereby incorporated by reference ai anther; j ihough folly and completely set 
forth herein. 

35 

Fig tn Net « L * nmunication System 

Figure 1 shows one embodiment of a distributed network communication system 100, The network system 
100 may include one or more access points 120, preferably a plurality of access points 120, At least a subset of die 
access points 120 are wireless access points (AP*) 120 -which communicate with a portable computing device (PCD) 
40 1 10 in a v w freless access point (AP) 120 may have a wireless connection or transceiver (e.g.. 
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ajs antenna) and mr-y operate i ...nous wireless standards, such as. wireless 

Bluetooth, etc. One or more of a» access points 120 nay also be wired access points which caaummicate with a 
portable computing device 1 10 in a wired fashion. 

Each. A? 120 may be coupled to a network 130. The network 130 may corcpise a wired network, a 
5 wireless network or a com i rks. Fc exi npk the is -"ork 1 *0 may be > standard 

"wired" Ethernet network which cotmecis each of the wireless (and wired) access points 120 together. The network 
130 may also be a wireless network based on IEEE 802.1 1 . The network 130 may form part of Ok Interne! 170, or 
iplt oth T * vorks, e.g., other local or wide- area networks., such as the internet 170. 
The network 130 nay also include or be coupled to other types of communications networks, (e.g., 
10 networks other than those comprised in the Internet) such as die public switched telephone network (PSTN), 
whereby a user using PCD 110 may send and receive information from/to the PSTN or other communication 
network through a wireless sendee provider. The network 130 may also include, or he- coupled to, another wide 
area network 130, such as a proprietary WAN. The network 130 thus may be, or be coupled lo, any of various wide 
area networks (WANs) or local area networks (WANs), including the Interact 170. 
15 The access points (APs) 120 may be widely distributed in various facilities, such as airports, mass-transit 

stations, hotels, shopping malls, restaurants and other businesses, such as business offices, law Cam offices, retail 
stores, etc. For example, where the acce points 1 '> a*c distributed in an airport, one or more access points 120 
nay he distributed throughout various terminals in the airport, in an airline club, and in coffee shops, restaurants or 
rental car counters at the respective airport rhc access points 12 na In irii ril ned to service mobile 
20 users, wherein it may not be known ahead of time which mobile users will be accessing the network from which 
locations. Thus the- network system 100 is preferably a distributed network .system, with access points placed in 
locations to service mobile users. This differs from a conventional iked) A*. I ..orally pre-configared 

as to which pre -detenrhned users will be using which nodes in the fixed LAN on a day-to-day basis, and the relative 
; i > T ,t 1 c pre-d tmin dus< a\ s£ so pro-configured. 
25 Bach access point 1 20 may comprise information used to identify ox select a wireless service provide! (also 

called a network provider) for a particular user, as well as related access infbnration to enable the wireless service 
provider to provide access. Each access point 120 may comprise information used to enabl irk act i 
a wireless service provider of a plurality of possible wireless service providers. Thus each access point 120 may 
support a plurality of different wireless service providers. When in sufficiently close range to an access point 120, 
30 or when the PCD 1 10 is directly coupled to an access point 120 in a wired fashion, the PCD 1 10 may access the 
rk ulilizi particni rcb • is < r, 1 lo 

A user operating a portable computing device (PCD) 110 may communicate with one of the access points 
120 to gain access to network services, such as Internet access. The portable computing device (PCD) 110 may 
have a wireless communication device, e.g., a wireless Ethernet card, Bluetooth -wireless interface, etc., for 
35 communicating with a wireless access point 120. The portable computing device (PCD) 1 10 may instead have a 
wired communication device, e.g., an Ethernet card, for commwriicuting with a wired access point 125, 

. The portable computing device U0 maybe soy of various types of devices, including a ( < ,< t 
such as a pc t J assistant (PDA), an Internet appliance, a communication!* de\ tee or 

telephony device, or other wired or wireless device. The PCD may include i us or wtred 

40 communication devices, such as a wireless Ethernet (IEEE 802.11) card, Bluetooth logic, paging logic, RF 
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conitnunfcation logic (such as cellular phone logic), a wired Ethernet card, a modem, a DSL device, an ISDN 
device, an A'"" - 1 allel or serial port bus interface, or other type of eoaffisuaioation device. 

The PCD 110 preferably mcludes a memory medium which stores identification rafotmation indicating a 
wireless service provide; to which the user has subscribed. The indicated wireless .service provider may be one of a 
5 plurality of possible wireless service providers that provide Internet access or other network services in a network 
' uch as that shorn in Figure 1. The identification infonaatkai nay be- a System ID (an 802,11 System ID), a 
MAC ID of a wireles Ethernet dt vi e comprised in the PCD 110, the mane of the wireless service provider, or 
other type of information feat uniquely identifies one (or more) wireless service providers. Where the 1 i 
network is IEEE 802.11 wirckss Ethernet, tht idei ? L f n s oi ) t I 

1 0 ID), an ESS ID (Bximded Service Set H>) or possibly a BSSID (Basic Service Set ID). Where the wireless network 
is Bluetooth, the identification information may he an IP address. The identification information may be contained 
in a digital certificate, which may he stored in a web browser or other location of the personal computing device 
110. 

Where the access point 120 is a wireless access point 120, the wireless communication may be 

15 accomplished in a number of ways. In one embodiment, PCD 1 10 and wireless AP 120 are both equipped with an 
oi ompatihle in power ar I I sh a wireless 

communication link. Wireless communication may also he accomplished through cellular, digital, or infrared 
comnaaficafion technologies, among others. To provide user identification and/or ensure security, the PCD 110 
may use any of various triry media ) m h as WEP (Wired Equivalent Privacy). 

20 Where She access point 120 is a wired access point 120, the wired connection may be accomplished 

through a variety of different ports, connectors, and transmission mediums. For example, the PCD 1 10 may be 
connected through an Ethernet, USB, serial, or parallel transmission cables, among others. The PCD 110 may also 
include various eommtmication devices for connecting £o the AP 120, such as wired Ethernet cards, modems, DSL 
v pt "> 1 ■» 1 1 < i n devices For example, a hotel may have Ethernet 

25 connections in the restaurants, shops, and guest rooms. An airline club, e.g., an airport Admiral's Club, may also 
have both wireless and wired connections for mobile users. A user may connect to a wired access point 120 through 
fiie use of a I opci nputer{FCD 110), 3n Ethernet network card, and a network cable. This connection may have 
the same impact as a connection made to a wireless AP 120 as discussed above. In other words, a user using a wired 
PCD 1 10 is able to "roam" on various network infiastnichires in the same manner as a user using a wireless PCD 

30 1 10. 

One or more wireless service providers may each have an associated network device 160 coupled to the 
network 1 '0 Fore mple Figure 1 iflusiraf 5 tietwori i \ iated with fiuee different wireless service 

pi id - te networi k vices l<50 may take any of various forms, such as a computer system, router, bridge, etc, 
i otedi vi > e providers may p» e i York sen s at a network iocati vithout being requu 

35 to locate any equipment or bandwidth at the network location. For example, a wireless service provider may 
combine VLANs and IP tunneling to avoid having to locate any equipment or bandwidth at a particular network 
location, 

A user ( > i ith om (or 

more) Wireless Service Providers (WSPs), also caHed network provide ts. Examples oi ce providers 

40 included - - n'cSrar and Softnet, among ofiwts. As discussed fcrfhrar below, when the PCD 1 10 of a user 
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communicates with an A? 120, the respective wireless service provider to which the user is subscribed is 
iii j ous afiiliat 1 h reles vice provider is d ed, a d > c i 

may he selected. After the wireless service provider is determined or selected, network access or sen ices may he 
provided through that wireless service provider. For example, data or packets from the respective PCD 1 10 may be 
5 routed to a destination designated by the respective wireless sen-ice provider, such as the respective provider's 
network device 160. This effectively allows a plurality of wireless sen-ice providers to each offer access on a 
common network infrastructure, i.e., on common access points. Thus a single access point can support multiple 
lifferenl 'j > e provid i <. . tan support subscribers of multiple different wireless service providers. 
This also allows subscribers of various wireless service providers to 'roam" on other no t suci etwork 

10 installed and/or maintained by other providers, or networks maintained by independent third parties. 

The network system 100 may also include a management information base (MIB) 150. The MIB 150 may 
be a mechanism, such as a memory, which may allow hie persistent storage and management of information needed 
by network 130 to operate. For example, in one embodiment of fee invention, the MIB 150 may store a data 
structure, such as a table comprising it list of identifr triors information and a corresponding list of the plurality of 

15 possible wireless service providers. The data structure may also store access information, which may comprise 
associated methods far providing data to Ore respt. i uraiity of} hi service provide flic ccess 

information may fori? mipri.se a - 1 1 n formation Thus ; the data structure may comprise 

a table having a plurality of tuples, with each tuple having the identification information, e.g., a System ID, the 
are Hiding wireless nice pi mdvj, and access information containing a method of access to the provider, 

20 possibly including a destination IP address or other methodology for accessing the provider's site. In an alternate 
embodiment, as noted above, the data structures which store this information may be comprised in each of the access 
points 120, or may be provided in various other locations. Each tuple may further include wired transport 
information, such as a VLAN fag, Gettemfeed Routing Encapsulation (GRP.), or other wired transport information, 
indicating a channel to be used on the wired ttetwork to whi b the AP 120 is coupled. 

25 As discussed further below, when a portable comntunicatioa device 1 10 of a user begins corammiicatioa 

with an access point 120, the portable comtrwntcation device 1 10 may transmit wireless service provider ID 
information, and the wireless service provider for the portable computing device 110 maybe deter nin ;d ■ no thi 
data sttuctar*. The memory medium containing the data structure may be accessed, and received wireless sendee 
provider identification information from the respective portable computing device 1 10 may be used to index into the 

30 data structure or table to determine the wireless service provider. The appropriate access method may also be 
accessed and used for enabling the wireless service provider to provide network services, e.g., (he access method 
may bo used for providing the data from the respective portable computing device 1 10 to die de 
service provider. For example, wired transport information may also be used to determine how to ransfer pad i 
on the v tnetwot < f < r n i A o be retrieved and used to detetratae a user's access to local 

35 network resources or Internet access. 

The MIB 150 may store other information, such as a directory of ail the elements (e.g., APs, PCDs, etc) in 

£ j ! I ( i the O ii C 0 S 1 1 tS, C I 

connection links, performance and tread statistics, and any information which is of interest in the operation of the 
network 130, For example, the MIB may store the precise longitude, latitude, altitu.fc and other geographic 
40 information pinpointing the location of each access point 
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One or more service providers 140 may also fee celled to the rrrA or 130 on t towfriehthe 
t jI och as the In st 170. A r i <> im"s ice provid 1 tended 1 u i 

various types of service and information providers which way fee connected to the network 130. The service 
provider 140 i) jl ny of various forms and may provide any ot or infonnanwu Bach service 

5 provider 140 may include one or more computers or con i sten mfigw to pi e goods infonrcm'on 
and/or services as appropriate for the service provider. The one or more sen-ice providers 140 may couple io the 
network in a wired or wireless fashion. The service providers 140 may include "network access" providers which 
typically charge fees fornetwork access. The service providers 1 40 nay also include other types of providers which 
i the location where the APs are located. Fox example, in an airport, e u ; ie sen ict 

10 providers may include an airline server or ahKn personnel (wl ch may ope it i cii it; .i ,1* } which provides 
fbgi t information and/or helps direct passengers (o flights, In a hotel, example services providers may include 
i v p engineering, and other typical hotel services which may utilise particular WSPs for then respective 
network sendees. For example, maid carls in a hotel may be configured with PCDs to answe! 1 . 
thu in m\ may mi hide > mm lor 

1 5 serving customers, as well as operational service providers for serving the needs of employees. 

The network comrounicaiion system 100 may be geographic-based. In other words, the network 
alio system 100 xnay provide information and/or services to me user 1 ta i ist partly on the known 
geographic location of the user, e.g., as indicated fey the access points 120 or as indicated by geographic information 
(e.g., GPS information) provided from die PCD 1 10. In one embodiment, the APs 120 are arranged at known 

20 geographic locations awl may provide geographic location information regatd ng the geof vaphic location of &c riser 
or the PCD HO. In another embodiment, the PCD 110 may provide geographic location rofoanatton of the PCD 
1 10 through the AP 120 to the network 130. For example, the PCD 1 10 may include GPS (Global Positioning 
System) equipment to enable the PCD 1 10 So provide its geographic location through the AP 120 to the network 
130, such as to a service provider 140 coupled to fhe network 130. 

25 In one embodiment, the network eorrammfcafioB system 100 may provide information and' or services to 

the user based on both the known geographic location of the user and an access level of the user. For example, a 
bank official may have an access level which allows access to security codes regarding electronic or physical access 
to funds. The access level may only he operational when the employee (or fhe employee's PCD) is in a secure area 
of the hank, thereby preventing unauthorized or unintended access to sensitive information such as due to coercion 

30 or theft of the user's PCD, 

M nor Medmm and Caj tier Medhim 

One or more of the systems described above, such as PCD 1 10, access points 120, MIB ISO, and wireless 
;uvice providers 1 60 may include a memory med ui < n v hit ! ; < o nput c progs atns or data according to the present 

35 invention may be stored. For example, each of the access points 120 and/or the MIB 1 SO nay store a data structure 
as described above comprising information regarding identification information, corresponding wireless service 
providers J 60 and access information such as associated data routing methods. Bach of the access points 120 and/or 
the MIB 150 maj rhrthei s;^ e mg the information 

therein to properly provide oi route data between users (sufe.-cr.l . i 

40 v on ively i ro\ tde or route data depending on the access information. 
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Gne or more of the access points 120 and/or fee MSB ISO may include software that enables fee AP 120 to 
accommodate or service subscribers of a plurality of different WSPs, Thus m AP 120 may be operable to appear as 
any one of a plurality of lifl sren) \\ SP AFs, meaning feat a single AP may "pretend to be" or behave as m access 
point dedicated to a particular WSP for each of a plurality of different WSPs. in contrast, prior art APs are only 
5 able to provide access point services for a single WSP, M other words, according to one embodiment of fee 
invention, an AP IQi i program feat allow it to act as aa AP for each of a plurality 

of WSPs. Thus, each AP 120 may be capable of broadcasting or recognizing any of a plurality of SIDS, and 
maintaining associations between fee SIDS and fee subscribers of fee respective WSPs. The physical AP may 
farther behave appropriately for different SIDS that are received from PCDs of users, providing network services to 

1 0 each user through feat user's corresponding WSP. 

In one embodiment, at least one of the APs 120 may include software feat enables the single physical AP 
120 to implement a plurality of virtual APs, where a virtual AP may comprise access point functionality 
implemented in software feat appears as a physical AP to a PCD, The plurality of virtual APs or "software" APs 
may be implemented on one or more physical APs, e.g., on a common set of physical APs. Each instance of a 

15 virtual AP executes a complete 802.1 1 protocol stack, and is indistinguishable from a hardware AP to any wireless 
network chennVs, Each virtual AP or "software" AP may include its own ESSJD (e.g., an ESS1D as specified in 
IEEE S02. 1 1) and may be uniquely associated wife a corresponding WSP. Thus, each WSP feat uses a virtual AP 
solution would enjoy fee illusion, that there was a complete wireless infrastructure available for its exclusive use. 

In another embodiment, at leas!: one of (lie APs 120 may include software feat enables fee single physical 

20 AP 120 to behave appropriately for each of a phirality of WSPs. For example, instead of implementing a plurality 
of virtual APs, i.e., instead of storing and executing a plurality of virtual AP softwar p ogram <ustmtmtiou», a 
sb < k ftwaie astantiat on may enable this operation. In the embodiment above, each virtual AP may entail one or 
mores (ware program and eat instant tion o \ virtual AP may utilize a separaf instantiation or replication f 
fecse one or more software programs. In this "super access point" embodiment, a single instantiation of one or more 

25 software programs may enable the physical AP 120 to behave appropriately for each of a plurality of WSPs. These 
one or more software programs may execute to cause fee AP 120 to: broadcast and recognize a plurality of different 
SlDs corresponding to each of a plurality of different WSPs, maintain associations between SIDs and WSPs, 
maintain SID and VLAN tag mappings, and perform other operations necessary to enable fee single physical AP 
120 to he! tppropria for each of a plurality of WSPs. 

30 In fee virtual AP embodiment described above, as noted, for one or more of fee access points 120, each 

physical access point 120 may include a plurality of virtual APs implemented in software feat are comprised on fee 
i ccess point 120 \s describe 5 ibove each of fh e virtual Al tnaj be used for eivicing a 

respective WSP, i.e., for providing network access services to a respective WSP. According lo fee current IEEE 
802. 1 1 standard, each physical AP has a BSSID (Basis Service Set ID). The BSSID is typically fee MAC IP of the 

35 network interface device comprised in fee physical AP 120, 

However, when multiple virtual APs are compn t «• j nted on 1 \ ical AP, it ma 

be possible to use the same M.AC ID of the physical AP as the BSSID of each of the virtual APs on that physical 
AP. In other words, using this approach, each of the virtual APs may not receive a unique BSSID, as they each 
would have fee MAC ED of fee physical AP. If it is desired or required for each of fee virtual APs to have a unique 

40 BSSID, then various alternative methods may as used, Inoneci i ' ' • MAC ID of the 
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, . \P is simply used foi ail virtual APs, Lc, is used as the BSSID for all virtual APs on thai physical 
\P Uus n mus embodiment, cud > I i < 

not believed that this will impact the operation of each of the virtual APs in any way. In an alternate embodiment, 
where it is desired that each of the virtual APs has a different respective BSSID. then the "local to network" MAC 
5 ID address hi Je fitted by IEEE fire adj If of ft ic t es " > > 

MAC ID for each of the virtual APs. 

In yet another alternate cmbodtmew. the . . cal AP is it ! * «. 1 a pool of MAC LO addresses and 
each of the virtual APs is assigned a unique MAC ID from this pool, thus providit h vkiwat VP vith a u» }ue 
MAC ID address, i.e., a unique BSSID. One drawback to Ms implementadon is the need for a larger number of 
10 MAC ID addresses than the methods previously described. 

In one embodiment, a single physical AP may support both Mrastru te Neiworl id (8SS) and Ad 
Hoc Networl ' , tent BSS, o.i 1 t.s's} in Hoc mode, each AP is just another peer on the network, 

lias may be accomplished by configuring one or more virtual APs for BSS, as described above, and one or more 
other virtual APs (also on tire same physical AP) for JBSS, or Ad Hoc Network mode. 
15 The term "memory medium" is intended to include various types of" memory or storage, including an 

installation medium, e.g., a CD-ROM, or floppy disks 104, a random access memory or computer system memory 
such as DRAM, SRAM, EDO RAM, Randws RAM, EPROM, EEPR.OM, Hash manor* etc., or a non-volatile 
memory such as a magnetic media, e.g., a hard drive, or optical storage. The memory medium may comprise other 
as well, oi combinations thereof. In addition, the memory medium may be located ia a first 
20 computer in which die programs are executed, or may be located in a second different computer which connects to 
the first computer over a network, hi the latter instance, the second computer provides the program instructions to 
the first computer for execution. The memory medium may also be a distributed memory medium, e.g., for security 
reasons, where a portion of the data is stored on one memory medium and the remaining portion of the data may be 
stored on a different memory medium. Also, the memory medium may be one of the networks to which the current 
25 network is coupled, e.g., a SAN (Storage Area 'Network). 

Also, each of the systems described above may take various forms, including a personal computer system, 
maim . >j> system, \> irkswtion, network appliance, internet appliance, personal digital assistant (PDA), 
television system or other device. In general, the terra "computer system" can be broadly defined to encompass any 
device having a processor which executes instructions from a memory medium. 
30 The memory medium in one or more of the above systems thus may store a software program or data for 

performing or enabling roaming or selective network resource access within a network system 100. A CPU or 
processing unit in one or mote of the above systems executing code and data from a memory medium comprises a 
1 > i e soft j iceording t< ethod arts described below. 

Various embodiments further include receiving or storing instructions and/or data implemented in 
35 accordance with the present description up >r - . <rx ct mec ) tm Su table j ory media as 

\ I i 1 'I (1 ) i t 1 I K v I I < I f 

conveyed via a communication medium such as networks and/or a wireless link. 
Figures 7 and 3: Bl ock Diagrams Of Th e System Of gigpre 1 
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i i > iii k diagrat astratmg a purti i less net ystemof Figi 

. ccess points 120 (A-C) which couple tors - iveV] \Ns, labeled 
VLAN1, VLAN2 and VLAN3. VLAN1, VLAN2 sad VLAN3 in turn couple to respective routers 160, labeled 
router A, router B and router C, which are provided by wireless service providers A, 13 and C respectively. These 
5 routers in turn conple io she Internet 170. As shown, cm or more access controllers, s.g,, computer systems 
configured to determine or control network service access, may be provided for each of the wireless service 
providers. The access controllers operate to verify user or subscriber access to the respective provider's network, 
Figure 2 ulu ties cce controller A, access controller B and access controller C> As shown, access controllers A 
andB axe coupled torontor Aandioutci B respect vely Howevc the it il> n c Iocs on foi 

10 the local network 130 ; e.g., may be comprised on an) of vaiii > shown with respect to 

access controller C. 

In this embodiment, the data structure may store an identification irdbrmation / VLAN tag mapping, e.g., an 
SID / VLAN tag map,.. 1 ) . pet ties io map the user to lite appropriate VLAN of the user 's wireless service 
provider. Thus, on the wired network to which the access points 120 are connected, the use of a different VLAN for 
15 «ach wireless service provider operates to separate data traffic on the wired network for each of the wireless sendee 
providers. It should be noted that one or more of the access points 120 way include software which implements a 
plurality of virtual access points, described above, each of which may correspond to a particular wireless service 
provider or VLAK 

As shown, each of VLAN1, VLAN2 and VLAN3 may be supported by one or more Ethernet switches 
20 which support tagged VLANs (IEEE 802. Iq). In addition, each switch may also support IEEE 802. Ip, which 
provides for various quality of service (QoS) metrics. This enables the switches to enforce certain predefined 
quality of service metrics for any given port or virtual port contained within the network. As shown 
also noted that a router may be present on more than one VLAN. As shown, Figure 3 includes an S02.1q switch 
which couples to three access points referred to 3s access point 1 (API), access point 2 (AP2), and access point 3 
25 (AP3). As shown, a router labeled Router C may be coupled to two or more VLANs as shown. 

Using VLANs, each access point 120 preferably has the ability to traasmtfreceive on one or more VLAN 
IPs to one or more wireless service providers. This permits, but does not require, that each wireless service provider 
use its own network numbering plan. At most, each wireless service provider may have an access controller and a 
router at each coverage location. As shown in Figures 2 and 3, the access controller is not required to be physically 
30 located at the overage location, but rather may be located anywhere. 

Fi gure 4 -Mull fflkAccgss 

Figure 4 is a flowchart diagram illustrating a method of allowing roaming access and/or selective access to 
< aeh * t mbodimeat, as described above, the PCX) 110 include wireless sc ice provider 

35 t« . i t , i » < preferably c-ompri s i ID, sto 

ihe memory of the PCD 110, The ids n ■ i infon tion i> include information which identifies one (or more) 
wireless service providers to which the user of PCD 110 is a subscriber. As noted above, the System ED may be an 
IEEE 802. 1 1 SSID or ESSID. The wireless service identification information may also be an 1? address in a 
Bluetooth wireless network. 
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l s i \i il ' i 1 - i! invention may be operable to receive an e fee ideiitiiicat 

, to allow a particular witet service of a ph I eles 

services to be selected and used for a user operating on the network, Asdbeuss further! t a Uon 
in&nmtiou may also store access level infonnatioK which may be used to indicate a network access or privilege 
5 level Has sioiwl ttrfbrtnaiiaR may be used to sefecl il t parts of fee 

network. 

As shown, in step 402 tlie user connects to fee network {e.g.. to an access point of the network). For 
impie, tl u i i iorf with a portal pa ffid may connect f 

festdon to an access point located at fee airport. In another scenario, fee user may eater a hotel room and connect in 

10 a wireless fashion to an Ethernet port to hts her ro « . lii b • ««• ted to the network. In another scenario, the 
user may ent flit it as a m or corporal i i nay connect in a wireless fashion to an 

access point located in that office. Thus, fee user may conn 1 to netwoi rn; s point h work in 
arty of various locations in a wireless fashion. 

in step 4(M the personal computing device (PCD) 110 of fee user rn.i> lia - tue provider 

15 (WSP) identification information (ID information) to an access point (AP) 120 of tire network. The identification 
information may take any of various foam, in one embodiment, the identification Mormation comprises a System 
ID (SID), e.g., an ESSID, according to IBEB 802.11. As discussed above, IEEE S02.ll (wireless Ethernet) is 
designed ro support multiple overlapping wireless LANs in a given coverage area. IBEB 802.1 1 uses the System ID 
(SID), or ESSID, to "select" which LAN to use, and thus the access point with which to associate, in feis 

20 embodnt ead i 1 (piely as -red wife a respective wireless service provider, and thus fee 

user may configure fee System ID on his/her PCD 1 10 to uniqnely identify the wirele | >d< j which fee 

i r hi elected or to which tire user has subscribed. The identification infotrnation may also or instead be a MAC 
(media access control Jet) ID which is comprised on a wireless Ethernet eatd of the personal computing device used 
by fee user. Ibe \i ID , perfon a similar purpose in selecting he win rvice »' 1 der. As noted 

25 above, the identification information may take various forms. For example, fee identification information may 
simply comprise the name of fee respective provider and the appropriate access infonnalion, which may be 
contained in a digital certificate. In various embothrnentS, the identification inforination may comprise other types 
of wireless service prowler identification as desired. 

In prior art systems, access points are only able to "listen for" one System ID which corresponds to one 

30 wireless s • ■ According to one embodiment of fee invention, each access point 120 may be operable to 
listen fox'" or "detect" a plurali lit s of k i ioi brmati >n, e.g., a plurality Of different System 

IDs, which may correspond to a plurality of different possible wireless service providers, or which may correspond 
to unkmn iwb ice providers. Thus, each AP may be set up to 'listen" for ail typs - >1 idem* 

irrformaticn, e.g., listen for all SH>3, and to answer all queries from PCDs 1 10, even if the identification information 

35 or SID is not recognized by fee particular AP 129. Alternatively, each of the ac > be operable to 

id < i i i ( , i ' i t ,j i [ x i ch of > may ] dl least 

requests for SlDo Vi j t of the a ok heal 1 > * System IDs to di 

PC3>s,i.e., broadcast fee sets of SIDs the access pom > hen he PCDs may respond his roa aastl 
providing fee identifi on irjj latioi 
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w s ich the user has corns p 1 c location 

• t > i i i es jrovitk 1 ' oil 'it, tphie i< m 

herniation may originate ferni the AP 120 or ftoni the PCD 110 of the user. As discussed further below, this 
known geographic location mfcrnjatiou may be used in varioos ways, for example, the geographic location 
5 t i t r , 1 fii o or more possib ' < t i 1 i i 

previously subscribed, or may be ased in selecting the default provider. 

The- geographic location information may also he used in determining the network services or access 
pi > 1 1 . i • i t m del nh ii ', j in tsp cfs of the u >'»<,' ph f know ge< gi $j f u 
location infionnation may be used jo determine whether a third patty pays foi tht i vorf ■ ess oithe user. As one 

1.0 example > t < i < i h < ployi la iave pi viously directed that the employer will pay for network 
access of the employee if the employee is located hi an airport or hotel, hot trot if the employee is located, for 
example, m a bar. The known geographic location may also he used to determine a charge rate, based an various 
incentive or sponsorship programs of which the user is a member. For example, the user may receive a discount if 
he/she uses network access from certain locations, such as a certain business, a certain airport club, etc. The known 

1 5 geographic location information may also be used to selectively provide different access or privilege le vels based on 
the geographic location, e.g., a user may have greater privilege/access levels at a first geographic location than from 
a second oil tent s phtc location. This know n latioti may fm it 

services to the user which are dependent upon the geographic location of the user. For more information on the use 
of geographic location infonnation for providing geographic based services, please see U.S. Patent No. 5,835,061, 

20 referenced above. 

In step 412 the wire mice p ovider may masse the received identification information, e,g., the 
System ID, or other Identification information and determine whether the ret m>< v tication atioa 
known or recognized. In step 412 the method may also determine if other id information is valid. If the- 
t lation ij> determined to not be known, e.g., the System ID is unknown, then in step 422 the 
25 method may perform processing to account for the unl > j ~h>o imolve 

performing processing for an unknown or incorrect digital certificate or other iinknown information. 

hi step 422, where the identification infonnation is determined to not be known or recognized, the method 
may select a de&ult wireless sendee provider for the user for network access. The default wireless service provider 
may fee the provider who trnm , ■ 1 i ess neb n stem being used, or may be a randon J> cad provider 
30 In step 423 the user may be required to register with this provider to gain network access. This provider may then 
i v of then ici lv» credit card. For examples, the provider may present a web page on 

the user's PCD 110 requesting the user to enter credit card infoimartoa foi access to the network. Operation then 
proceeds to step 432, 

Also, if the identification infonnation is determined to not be known, the access or privilege level of the 
35 user may be set to the lowest possible level I his i.u c nple. n liov user to til , have access to certain 
.11 } local Hirojs but no externa! actress, e.g., to the Internet. Thus, for example, where the APs 120 are 
to c ated in an airport, the user having a low access level, e.g., the user whose identification information is not known, 

, t ; on the local LAN 

at the airport Un i I \-mef access. Access to local resources may be allowed since this 

40 does not require the use of external facilities and hence does not consume off-property bandwidth, and thus is 
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relatively im - I 11 sly, if the identification unormafe - . 'ledtuaotbe 

my provide sen 3 01a) access 1 1 > 5 t I d < j 1 , 1 1 [utenu 

provider, without the user being able to view or use any local network resources. 

If known identification, information is detertnhisd to be received in step 412, then, in step 4 16 the method 
5 may detemiiae the wireless service provider which corresponds to the identification information (e.g., the System 
ID). p iii > ( s j t m ervice p ler information rored i 

each of die access points 120. In this embodiment, the respect! t rco point wit! hich f 1 ci omraunicating 
receives the identification ufoimahoii and uses the di 1 , . nation t<> obtain d -, 1 or 

1 on t x ikI ng % der to which the user of the PCD HO is subscribed, hi step 418 the respective 

10 access point 120 may also access the data structure to determine die appropriate access method or access level for 
1 \ t i L e 1 ice provider 1 ot example the respective access point 120 

mav iccess Ik 1 structure to - >f espectivi D 1 I \ 1 to determine the VLAN tag to use for the 

pi ivider, In one embodiment, die respective access point i JO rna> a 
information from a separate data structure stored in MIB 150. 

15 in an alternate embodiment, the PCD 1 10 of the user may provide all of this information to the access point 

120. In this embodiment, the data structure containing fee wireless sendee provider data and access information 
may not be required to be stored in the access points 120 or on the network. Alternatively, data may be stored on 
the network 1 30, e.g., in the access points 120 or in the MIB .150, which is used only to validate this Information 
received from the user. 

20 \ m t 

each tuple stores a set of identification information, the via 

1 n information, ar cess mformati so .. 1 fi tit 1 1 n | ' >> i > 

example of this data structure is shown in Figure 5. 'ffae data structure shown in Figure 5 includes five different sets 
of three-tuples. It is noted Oiat the data structure - - u 1 any oi various forms 

25 The access information may inciude an access method, possibly including a destination address, or other 

method by which data packets are routed to/from the respective site of the wireless service provider, or other method 
which directs that network access be provided by that wifeless service provider. -The access information may also 
include a SID wired, nsport hrrasm mapping, such as a SID / VLAN tag mapping. The access information 
may also include an access level or privilege level that indicates which network resources that the user may access, 

30 e.g., whether the user is only allowed access to resources on die local network 130, or is only or in addition allowed 
external access, such as Internet access. 

'thus, when the access point 120 receives the identification adoroiauon, the access point may simply use 
the identification hsfonaatiou to index into a table containing ibis information to detennine the appropriate wireless 
service provider and the respective access method and/or access level 

35 It is noted that each of steps 412, 416 and 418, and 422 may be performed as one action or a series of 

related actions. In other words, when the access point 120 receives die identification information, if the 
identification information does not index into any of the entries in the data structure or table, then the identification 
rrdbrmation or System E> is determined to be unknown or not associated wife a respective wireless service provider 
as determined m step 412, in this case, the default provider and default access level may be selected as performed 

40 in step 422. If then lot f 1 i ■ t 1 j si it * > >! it the corresponding 
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rirel 6 • necessary equipment to s ots I a rficn this may also be 

treated as imkn t lentifieat >n information where another provider or the default provider may be selected as 
performed to step 422, 

If the identification information properly indexes into fee table, then in steps 416 and 418 information from 
5 the respective entry of the table is accessed and used to determine a corresponding wireless service provider which 
can accommodate the user's network access, as well as fee associated method and access level for providing 
network access using die wireless service provider. 

After fee vu ryice provider an il > sss method / level have been determined in each of 

steps 416 and 418, then in Step 432 network access or network serrices may be provided to fee po able c ip 
20 deviee 110 through the determined wireless service provider. For example h stc| 132 fe , point 120 with 
■ h d > > <• nin imc tin i»\ operate to provide dam to/from & destination specified by the determined 
wireless service provider using fee method specified by the determined wireless service provider, e.g., the method 
comprised in the table or data structure. In one embodiment, the access point 120 may operate simply as a bridge or 
route which operates to forward or route packets to the appropriate destination, e.g., to fee wireless service 
15 provider's network device 160 or to the provider's site. As noted above, fee wireless service provider may provide 
a network deviee 160 such as a router, which operates to route packets to fee provider's site or otherwise simply 
allow Internet access to the user. Thus in step 432 the method allows the personal computing device of the user 
access to the network using the user's provider. 

In another embodiment, the access point 120 itself operates as a route to route packets to the determined 
20 wireless service provider's site, which may be located on fee Internet. Thus, in this embodiment, fee wireless 
service provider may not be required to provide any type of network device 160 to enable network access for its 
i c,.five subscribers. Rather, data packets from the PCD 1 10 of fee user may be routed to tk teles 
provider's site on fee Internet, which may be located in any location. 

In step 432 data is communicated between the PCD 130 and the respective destination specified by the 
25 wireless service provider preferably using a secured technique. Examples of possible secured techniques include 
Layer 2 forwarding; various tunneling protocols such as PPTP, IPSEC, GRE, and IP-iu-IP; and tagged VLANs 
(IEEE 802. Iq), among others. 

m one embcxhmenf, in step 432 the access point 120 operates to direct PCDs 110 to an available 
communication channel, e.g., an available SF channel or other wireless channel, possibly based on information 
30 received from fee PCD 1 10, Thus the access point 120, not fee PCD 110, may assign channels for coinrunnication. 
For example, t v c oitif 120 may operate to direct a PCD 1 10 to an available communication channel (e.g.. an 
RP channel) based on fee identification information,, e.g.. fee SID, received from fee PCD 110, The access point 
120 may also operate to direct the PCD 110 to an available communication channel based on other types of 
identification or authentication information, or o~ the o.v er n )ed aci es lei el of fee PCD, This allows an access 
35 point 120 to separate fee communication traffic onto different channels based on the wire! • ;rvioe provider being 
used, or baaed on fee access or privilege level of fee PCD 110. For example, the access point 120 may assign a 
PCD HO a communication channel based on whether the PCD 110 has ace i to :..\ ate portions of the network. 

In step 434 fee selected wireless sendee provider may record charges for the network access. In one 
embodiment, each of fee whefcss sendee providers respective* devices 160 may maintain separate charge/billing 
40 information for each of their respective subscribers. Thus, the network device 1 60 of fee selected wireless service 
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s ; ivcess of foe user. Alls ' ■ * • t . up led to the 

network 130, such as the MIB 150, or another computer system, may receive information, torn foe -wireless access 
point 120 as to the determined wireless service provider, and the compute] system na j mm am nil g oha gtt 
mfoni-^tioii for each of a subset or all of the wireless service providers. In one embodiment, hilling infonmtion for 
5 the user may be stored on the PCD 1 10 and may be provided to the AP 120. 

As noted above, network charging information may also be based oa known geogtaphic information, as 
well a?, fot example, sponsorship ox detm gi rp u t: f» rmahoa of the user, which may be provided to the access 
point in a digital certificate, 

Vs not i - t i « 1 i f > i . v |i ! 

10 meachof the- access points 120. Alternatively, the data structure may be stored isep e eon uter system, such 
as the MIB 150. In this latter instance, each of foe access points 120 may operate to forward the identification 
information to the MIB or other computer system 150, and this computer system may perform steps 412, 416 and 
418 of determining the appropriate wireless sendee provider and corresponding access method, or selecting foe 
d link pic-sidvr Otic ib w i r i ccess met! rave been determined in this embodiment, 

15 this information may be forwarded to the respective access point 120 for proper tx i espective access 

point 120 may forward data received from the PCD 110 of the user to the MIB 150 or an associated renter for 
proper routing to the respective wireless service provider's device 160 or io the appropriate site on the internet. 

Thus, in step 432 the PCD HO of the user is allowed to obtain network access through his previously 
chosen wireless sendee provider, i.e., through the wireless service provider to which the user has previously 

20 subscribed. As noted above, the wireless service provider, may operate to maintain billing/charging itrformation 
through its equipment 160, at its site, or through a shared resource such as MIB 150. As also noted shove, the 
billing infonnation may be stored on the PCD 1 10 of the user, e.g., in the user's digital certificate. In this case, if 
the AP 120 answers the query of the PCD 110 and allows access after confirm : 

> » r roam and billing. This effectively allows users to roam oa various network jn&astrucinres, 

25 e.g., allows a user who is a subscriber of wirek , rvicepi tvid « \ to mam on j network infrastructure operated 
and maintained by wireless sendee prouder B. Alternatively, certain portions of foe network infrastructure may be 
built and maintained by a third party who is not a wireless service provider, and subscribers of each of the various 
wireless service providers may be able to roam onto (his network, perhaps with a small fee being paid to foe 
manager of the network infrastructure in addition to the fee normally paid to the wireless service provider for 

30 network access. Further, users who have never previously subscribed to a wireless service provider may be allowed 
to cormnunieate with an AP 120 and select a wire s seivict >vid » i tgned the defaul vireless, service 
provider, for network access. 

Different Access Levels 

35 As noted . i t bothtnenj, the data structure or table may store one or more different access 

methods depending upon ai it on ado-mutton Thus referring back *o 

Figure 1, foe network 1 30 j ta> pros ids est 1 net t %J1 as external Internet access which may 

both he available to users having a first access level. Users with a second, lower, access level may not be entitled to 
external access, but may be simply able to new or utilise certain local network resources mi network 130. Users 

40 may - - 1 ed to make S02.1 1 voice calls using foe network, depending on access level. 
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For example, in an airport scenario, a noa-reeognized user, or a user paying a lower fee, may have an 
i fare! that only allows him/her access to local contest such as various airport advertising, airport 

I ] tc. are located, flight 

information, etc., but does not allow the non-recognized user external access, e.g., access to fee Internet A noti- 
S recognized user -would of course also not nave any access to private corporate LANs maintained on this network, 
such as the corporate 1 A of airi ae located at the airport, 

if the wireless network system provides a mechanism for the user to registet t > " f cribe to a wireless 
service provider, fiien die user may do so and receive Internet access through, that selected provider. As another 
alternative, the network system may provid a mechanism i the r to j 1 > 1 1 ~ 1 ernal wireless 
10 service provider, e.g., an external ISP I f< ml fee paid to the maintainer of the network system. 

Alternatively, the network 130 may provide various local resources as well as externa! Internet access 
which may both be available to users having a fast access level, and users with a second access level may not be 
entitled to view or utilize these local network resources on network 130, but may he simply provided some form of 
external access, such as external telephone access using Voice over Internet Protocol (VoIP) or possibly a pathway 
15 to the Internet. 

For example, where the network 130 and one or more wireless access points 120 are comprised in an 
airport, one or more airlines may maintain various computing resources on the local network 130 which are arable 
solely by airline employees and personnel. In this embodiment, PCDs 110 of airline employees may comprise 
- »tion information winch indicates an access level that allows them access to the various computing 

20 resources on the network 130. Thus, employees of a first airline such as American Airlines may have first access 
level information stored on their PCD ! Kim; • e r tl >then to utilise < m m uneticai Airli . omputing i sou es 
on the network 130, whereas employees of Delta Airlines may have second, different, access level information 
stored on their PCDs 1 19 winch enables use of only Delta Airlines computing resources located on the network 130, 
etc. Those users who are not airline employees or personnel may have access information stored on their PCDs 1 10 

2S which only allows them externa! access to the Internet and use of certain non-private local resources, but does not 
allow them to view or use any of the private computing resources on the network 130. Thus, PCDs 1 10 of users 
1 1 iv - o e \ mi us u i \ I i i ti ely allows 

access to certain resources on the local network 130. This effectively facilitates private and public portions of the 
network 130. 

30 As another example, consider an office, such as a law firm office or business which maintains one or more 

wireless or wired access points 120. Employees of the office may have first access level information (possibly of 
varying degrees) stored on their PCDs 110 which gt . its iK> .\u s t< ;el iV » . a at! resources on tins 
network 130. However, visitors to this oi free ".tin h do not h i% e tins privilege « s \ 1 1 iav he detected by a 
wireless or wired access point and not be allowed to view or use a " k 1 30, but 

35 rather amy simply be provided a port for oomph utat or hi al \> ml c cess to the internet. Thus, a visitor 
or customer of die b i lly present in the office and desires Internet access may utilize his PCD 

110 to gain access to die Internet through the local network of the office 130, without the visitor or customer being 
able to view any of the computing re : a as, etc , of that local network 130. In addition, if the user's 

corporate intranet is web-based, the user may be allowed access to his own LAN couiputing resources remotely. 
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This allows a busint-s to p r i s and visitors with fn 130 without 

» onip o m ing the secui u of the network 130. 

As noted above, in oik ' - ! > i the known geogiaphjc , > iso be used io 

■ i T 1 Is based on tb phic location, e.g., a user may have 

5 gtsate: privilege/access leveb at a first geographi c < n * i cond dUfereo i c location For 

ijpk o l<» he network 130 and one or more wireless access points 120 are comprised i m irp< i asei J 
have a greater access level and hence access to more network resources front, for example, an airline club such as an 
i hib, and the same uses may I ' i 1 s access to fewer network resources from 

an airline gate. Thus &s access level of a user may be based at least partly on the geographic location of the user. 
10 This may possibly be based on various agreements negotiated by service providers to "reward" users who are 
present at their geographic location In n similar manner, the network charge rale may also be based on the 
geographic location of the user. 

{{iirs in stop 418, where tb i t - tbod for the wireles vniitpimJi) ibf 

method may also determine one or mare access levels or privilege levels contained wiihin the identification 
15 information to determine whether the user should be provided wiih Internet access or should only have access to 
local resources on the network. The method may also determine the known geographic location of the user to aid in 
determining the access level as described above. 

la Step 432 the access point 120 or M3B 150 or other device operates to provide or route data depending 
upon this access level. Thus, users with the appropriate access level may have Internet access as well as be able to 
20 view and use resources on the network 130, while users lacking mis necessary access level may simply foe provided 
with certain local network resources and not have any Internet access. Alternatively, users having a lower access or 
pri ' . ma> be provided some form of external access, such as local telephone access usit . . * 
voice calls, or possibly complimentary Internet access, without being able to view or use certain private network 
resources. 

25 



Figure 6 illustrates one exemplary embedment where a PCD 11 OA of a first user comprises identification 
information including an access level which indicates that the user has access only to the computing resources on the 
local network 130. In this instance, once this access level has been verified, such as by a lookup in the tabic or data 

30 structure, data or packets from the PCD 1 1 OA may be routed to various computing resources on the local network as 
shown by the arrows designated "1". poi «« mf k, i ackets from PCD 1 IDA may be routed to virtual access point 
6021; which is associated with local network 130. ha contrast, PCD HOB of a second user comprises identification 
mfamiattor . a higher access level which encompasses accessing local resources on network 130 as 

well as Internet acce sis i s data u t packets may also be routed from 

35 the PCD 1 1 0B through the access point 120 and directly our to an external access port for Internet access. Thus, the 
i i t , > { c i ege level is able K n pitting j 

the network 130, but cannot gain Internet access through me network 130, As noted above, the system can also be 
configured whereby the user who does not have die appropriate access or privilege level is only allowed Internet 
access, and users with higher privilege levels are able to view or use computing resources on the network 130. 
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Thus, the present invention enables two or more wireless service p; £ a con n on se of 

i i ^ i 1 oiuf.s to pro 1 i ces to a potentially o ( 1 o t t 

This allows use of a single network mfrastractare, which mmhrally impacts the wireless spectrum, available at a 
1 Hoi 1 i lowing t n m. possible munber oi rekss s i p U >f idr j rk 3c 
5 services. In addition, the system and method descr herein allows s > ce provider A 

be able to rise the network access sen-ice provided by wireless service provider B in a location otherwise not 
serviced by provider A without necessarily requiring any relationship with provider B and vice versa. This allows a 
confederation of wireless service providers to offer network access to a larger footprint of locations, which offers 
more vaiue to each of the h respective subscribers. 

10 The system may thus alio 1 t ess from multiple different providers. For example, one 

nwmiimi. Hum sonne vm be reined to is, i Wiypoit rs^nsnrl- (W^pt ister. 1 (it < 1 ot A\ a>poir. 

Inc. of Austin, Texas). A Wayport network may be compatible with other types of similat networks maintained by 
other companies. For example, if Wayport networks are insinilcd in the Austm-Bergstrom Internationa] airport and 
similai XY; . ii i d in :i hotel in downtown Austin i user lhat has obscribed to Waypoit networks 

15 may be able to use the services offered at the downtown hotel by XYZ. Mote specifically, a user that lias registered 
with a Wayport ne twork {e.g., has entered demographic data aud agreed to pay transaction costs) may not need to 
register with XYZ. The user may use other wireless service providers (e.g., XYZ lit 1 v in in lit < 

from one company (e.g. t the provider of the Wayport network with which the user is registered). Tins may be 
accomplished through agreements established between different wireless service providers. 

20 In one example, a Wayport network-registered user attempts to connect to die XYZ network: in the 

downtown hotel. In the embodiment described herein, the access point 120 maintained by the XYZ network still 
answers or communicates with the PCD 110, even though the PCD 110 provides identification information mat is 
✓ed by, the access point 120, In this example, assume die XYZ 
network notices from the PCD ID information that n t >» «* t ister nth network,! » v 

25 on the Wayport network. The XYZ network may perform a verification of the PCD ID by querying a database of 
registered PCD IDs on die Wayport network. The XYZ network may acquire demographic information from, or 
using, the credentials of the user. If the credentials of the user are not acceptable, access to the XYZ network may 
be denied. If the credentials are acceptable, the XYZ network may grant the user access to various goods, 
information and/or service providers. The XYZ network may inform the user (via a message on the user's PCD) 

30 that there is an additional cost for accessing the XYZ network as a non-registered user. The user may then have the 
choice of paying the additional fees for the services or disconnecting. In addition, the user nay have the option of 
registering with the XYZ network to avoid paying 'roaming' fees. 

W if eless AT Usage of M ultiple Channels 
35 A wireless access point 120 can use one of a plurality of different RF (radio frequency) channels for 

communication with portable computing devices of users. For example, a wireless access point 120 can use one of 

RP channels 1 through 1 1 . As veil kco < , RF channels 1, 6 and 1 1 are not. >» tj < ith the remainder of 

these channels being partiallj t >p hatmvU 

According to one embodiment of the present invention, each wireless access point can communicate on one 
40 or more, e.g. a plurality of or all of, the available wireless channels, e.g., the available RF channels. Furthermore, 
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ch point! n ntroi Inch channel the portable < npiti e\ see 1 1 0 of a client is able? to use. In one 
embodiment, each portable cojuputtag device may scan each, of fee RF channels until it detects a wireless access 
point 120 on one of the channels. 

In one embodiment one or more of the wireless access points may each utilize a plurality of the RF 
5 channels, e.g., may use each of the non-overlapping channels 1, 6 and i 1 to defectively provide op to three tunes the 
normal channel capacity. Urns, the wireless access point 120 maybe able to control allocations of a plurality or all 
of the respective RF channels to sele - ivel; >t t in higher bandv kith when appropriate, or to simply accommodate a 
greater number of subscribers. Thns, if a wireless access point using only one RF channel could only han 11 i ' try 
PCDs 110 on that respective channel, the wireless access point may operate to use all three non-overlapping RF 
10 channels to effc i t tj o a total of 150 simultaneous PCDs 110. 

As another example, if the wireles s< s 5 po at 120 is only commumcathig with one portable computing 
device 1 10, then fee wireless access point 120 may optionally or selectively use each of the three non-overlapping 
RF channels to produce effectively three times the bandwrdfe for this communication. As additional portable 
computer devices engage in commtinication with the respective wireless access point, 120, the wireless access point 
X5 120 may e Hocate different channels to different ones of these PCDs as needed. Further, if more man 

three PCDs are communicating with the respective wireless access point the wireless access point 120 may partition 
one or more of the respective channels for the respective users, such as by using wireless Ethernet Collision Sense 
Multiple Access/Collision Detection (CSMA/CD) or other multiple access schemes such as TDMA, FDMA, or 
CDMA, among others. 

20 In one embodiment, as described above with respect to step 432, the access point 120 operates to direct 

it IX Dam >ii tvailabh ha <?i possib based on ■> on tin f< e eel from the PCD HO. f Ehus the access point 
120, not the PCD 1 10, may assign channels for communication Fore pie, tin £ nt > operate t 
direct a PCD 110 to an available communication channel (e.g., an RF channel) based on the identification 
information, e.g., the SID, received &om (he PCD 110. The access point 120 may also operate to direct the PCD 

25 H O to an available communication channel based on other types of identification or authentication information, or 
on the determined access level of the PCD. This allows the tcce point i JO to sepaiate the communication traffic 
onto different channels based on tk vireless sen ice pre. kfer being used, or based cm die access or privilege level 
of the PCD 110. For example, the access point 120 may assign, a PCD 1.10 a cornmunicatioii channel based on 
whether the PCD 1 10 has access to private portions of the network. 

30 

Figure ? is a flowchart diagram illustrating operation of initial communication of a user's PCD with an 
» pomt i distributed network system, according to one embodiment of the invention. Here ii is 

presumed that a uset \ t sntuiieatioa with the 

35 AP- As shown in step 702 the AP detects the PCD. Here it is noted that several troech ms nay be used 

to initiate communication between an AP and a PCD. In one implementation, the PCD may transmit a "probe" 
signal to fee AP containing an SID, e.g., an ESSGD as specified m IEEE 802.11, indicating a particular WSP. Here 
it is presumed that the PCD stores the SID, e.g., fee BSSID, corresponding to a pre selected WSP to which the user 
of fee PCD has previously subscribed. The AP may then respond to fee probe by transmitting connection 

40 infoi mat in ; to fius ESSID ha this implementation, fee PCD simply transmits the BSSID w the AP to 
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indicate to the AP the selected WSF of the PCD. jn a second unpfcmentation, the AP may "beacon" 01 provide 
i i i t \ 1 > uppotted by that AP. As noted above, each 

supported WSP has a corresponding ESSED and also has a corresponding virtual AP, i.e., virtual AP software 
comprised on the physical AP that implements or presents a virtual AP that is used for that WSP. In this 
5 imple negation, the AP cc D receives this 

beacon, analyzes the possible BSSXDs, and selects an ESSID to provide back to the AP. Pot example, if the PCD 
has previously registered with or subscribed to a chosen WSP, and fee PCD detects that the JBSSJD of tin's 
previously selected WSP is included in the beacon, then the PCD typically will select the WSP and ttaxtsm - I 
BSSJD corresponding to the previously selected WSP. If the PCD has previously subscribed with a WSP that is not 

10 present it the 1 l > ESSID fha are beaconed b$ tin, ^P then the PCD xrm\ use some secondary choice 
i i i electa WSP that is supported by thisAP. ev< PCD may noi hava pre\ 

with or have a relationship with this WSP, For example, the PCD may simply sel ! ! a V'SP f m the list of 
available WSPs if the preferred WSP is not supported by that AP. Alternatively, the PCD may analyse signal 
strength or may uhh :e billing f , img information in evaluating which WSP to select based on the list of available 

15 WSPs as indicated by the list of ESSIDs transmitted by the AP. 

in step 704 the PCD then transmits the ESSID to the AP in a data packet As noted above, the transmitted 
ESSID maybe the ESSID that is stored on the PCD which corresponds to the WSP previously selected by the PCD, 
ie. s to which the PCD has previously subscribed. Alternatively, the PCD tasty transmit an ESSE) that is selected 
from a list ot p* - t beaconed by the AP. 

20 m step 706 the software executing on the AP (or device coupled to the AP) operates to extract user ID 

mforniation from (he « el ftom the PCD, In one embodiment, the user identification information may 

comprise a MAC ID of the network interface card (NIC) comprised on the PCD. Alternatively, the user ID 
information may comprise any other information that is suitable for particular!} idci j nset or the 

PCD of fee user. The user ID information is preferably comprised in each packet transmitted by the PCD to enable 

25 each packet to be properly routed to a corresponding virtual AP and wired transport mechanism as discussed below. 

fa step 708 the software executing on die AP stores the user ID information, e.g., the MAC ID, into a table 
corresponding to (he P.SSID transmitted by the PCD in step 704. Thns, in step 708 fee user ID information is 
associated with the ESSID and hence with the selected WSP. As discussed further below, this fable can later be 
accessed on receipt of subsequent packets to associate the user ID information contained in received packets with 

30 the corresponding ESSID and hence with the chosen WSP and corresponding wired transport mechanism, e.g., 
VLANtag. 

In step 710 the AP determines th< i t i i 1 on die ESSID. 

aa!ry, in step 71 mud A 1 ' i ESSID execu > i 

to uansmit fee pack 1 ' * 1 ' i using the wired transport mechanism, e.g., using the VLAN 

35 tag that corresponds to the ESSID, 

Figure S is a flowchart diagram illustrating operation of PCD communication with an AP after an 
i snt has occurred i a atM the method described in Figure 7 has been executed to create an entry in 
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the table of the AP associating the user ID toforroatton ol ihe 1 CD with a con. >. h n fa ID and hence with a 
selected WSP, 

As shown, in step 802 the AP receives a packet tern fee PCD. Each packet provided from the PCD 
u user JI nation \ tiden i 6 he PCD fron if na 
5 hi step 804 the AP deieraiines the user ID inforxnatton comprised within die packet. lit one embodiment, 

the user ID fcriarmation is a MAC 3D as discussed above. However, the user ID iafetmatioa may comprise other 
i 1 h t 1 ii 1 'Iv ifiedi fce Toot] orra i m 

fa step 8 t VP ai -< the table comprised withia the AP to determine the corresponding ESSE) sad 
wired transport mechanism based on the user ID information. In other words, when the association event occurs 
10 initially between the PCD and ihe AP, the table entry is created as described above in step 708; this table is then 
accessed on receipt of subsequent packets transmitted by the PCD to determine- die ESSID and wired transport 
mechanism, e.g., VXAK tag, based on the user ID iriformation. Thus, the table association created in. step 70S is 
accessed hi step 806 for each subsequent packet. 

In step SOS the virtual AP software corresponding to the determined ESSID transmits the packet received 
1 5 from the PCD onto the wired network using the determined wired transport mechanism. For example, the virtual AP 
may transmit the packet onto a LAN using the VLAN tag determined in step 806. 

Figure 9: Packets Amvingtorn Wjred„MedhLmto„the. AP Destined for a PCD 

Figure 9 is a flowchart diagram illustrating operation when incoming packets arrive ai ihe AP from the 
20 wired medium which are destined for one of ihe PCDs in communication with the AP, 

As shown, in step 902 the AP receives a packet from the wired medium that is intended for one or more 
PCDs that are in communication with the AP. 

In step 904 the AP operates to parse the packet to deter ) b the arriving 

racks! i o! com) a ed within ih tri tog p3ckel and also to determine die definition «ser ID information 
25 contained within the incoming packet. Incoming packets received from the wired medium may include user ID 
information corresponding to the destination PCD. Fo: I met tfte incoming 

packet may include a MAC ID corresponding to the destination network interface card (NIC) of the PCD, This user 
ID information is extracted or obtained from the packet to step 904, 

hi step 906 the AP may optionally ensure that She arriving packet arrived on a VLAN corresponding to the 
30 VLAN tag determined in step 904 as a security mechanism. In general, the incoming packet should arrive on the 
VLAN corresponding to the VLAN tag contained or comprised within the packet, If Ms is determined to not be the 
case to step 906, than the packet may be a spurious packet or present a security issue, and ti3e packet may simply be 
dropped. 

In step 908 the AP software accesses its tablets) to determine the virtual AP associated with the user ID 
35 Mormation obtained to step 904. Thus, in step 908 die user ID information, may be used in conjunction with the 
table to determine the virtual AP corresponding to the user ID information. As noted above, there is preferably a 1 
to i correspondence betwee r 5 i and a corresponding virtual AP. 

In step §10 the virtual AP software executes oat physical AP to w» ! , ! nsmit the packet received 
from the wired medium to the PCD a t wireles tansmission. 
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Therefore, Figures 7, 8 and 9 disclose one embodiment of a system and method operating in a distributed 
» role in tworfc >; t n based era IEEE S02 ,1 1 wireless Ethernet which operates to alow midtiple wireless sendee 
, L t t i i- ) tn 1 < fib f ! i i i bos f 

reference to Figures 1-9 allows a plurality of service providers to utilise i cot 
5 service to a potentially overlapping set of easterners, feus providing subscribers or users with &e ability to more 
I ■ diize the existing network mrrastructure. The system and method farther provide a distributed voteless 
network system which can selectively provide different access levels to users of the system. 

While the present invention has been described with reference to particular ernbodaraarts, it will be 
10 understood thai the embodiments are illustrative and thai the invention scope is not so limited. Any variations, 
modifications, additions, and improvements to the embodiments described are possible. These variations, 
t . > (Moris, and nnprovements may fall within the scope of the inventions as detailed within the 
following claims, 

15 
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1. A method for ptovkling access to a network, system, wherein Ac networic system includes a 
plurality of access points coupled to a network, the method comprising: 

a first access point receiving identification mfonnstion from a portable computing device., wherein the 
eaiifieationJnforri on * m i rvice pxovider of a pan , i~ x- ib u - providers; 

detemtining the wireless service provider fox the portable computing device ate receiving the 
identification aifonnation: 

he first I in from the portab omputing device; and 

providing network access to the portable computing device through fee wireless service provider 
determined in said determining. 

2. The method of claim 1, wherein said first access point is operable to accommodate subscribers of 
each of the plurality of possible wirele ss service providers. 

3 . The method of claim 2, further comprising : 

the first access point recognizing a System ID (SID) of a plurality of possible SIDs, wherein each of the 
plurality of possible SIDs is associated with a respective one of the plurality of possible wireless service providers. 

4. The method of claim 3, further comprising: 

the first access point maintaining associations between the plurality of possible SIDs and (lie plurality of 
possible wireless service providers. 

5. The method of claim 3, wither comprising: 

the fust access point maintaining associations between the plurality of possible SIDs and a plurality of 
active subscribers. 

d. The method of claim 2, further comprising: 

the first access point broadcasting a plurality of possible SIDs, wherein each of the plurality of possible 
SIDs is associated with a respective one of the plurality of possible wireless service provides. 

7. The method of claim 1 , wherein said first access point is operable to inaction as a wireless service 
provider access point for each of the plurality of possible wireless service providers, 

8, The method >f c 1 1 

> t nts a plurality of virtua ■ - wherein each virtual access point corresponds to one of the plurality 

of p , l . win less se5 \ ice pun iders, and wherein each virtual access point provides network access services to the 
cones-ponding v ee provider. 
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9. i i j hi i ( j x > \ - i t 

>al access point appears as a physical a i r i£ portable 



5 10. I t > i j i ! ach virtual act j - > j 

11, The method of claim 30, wherein the wiieles protocol stack prises a El 11 wirelet 
protocol stack. 

S O 12. i t (AP) include an Extended Sen ice Set 

ID (ESSE)), and wherein each ESSID corresponds to one of the plurality of possible wireless service providers. 

13, The method of claim 1, wherein said providing network access comprises providing the data 
received from the portable computing device to a destination based on the determined wireless service provider. 

15 

14, The method of claim 1, wherein the network system is useable by subscribers of each of the 
plurality of p< bk sin - ei < pt< icier; 

1 5 , The method of claim 1 , turther comprisingt 

20 maintain) - usage amount by the portable computing device; 

wherein the determined wireless service provider charges fot access by fire portable computing device to 
the network. 

16, The method of claim 1, wherein the network system includes a memory medium which stores a 
25 data structure comprising a list of identification information and a corresponding list of the plurality of possible 

wireless service providers; and 

wherein said detertirming the wireless service provider for the portable computing device includes 
1 i "> ( n d jtBnm and using the received identification information to determine the wireless service 
provider. 

30 

17, The method of claim 1, wherein the network system includes a memory medium which stores a 
data structure comprising a list of identification information, a corresponding list of the plurality of possible wireless 
set-vice providers, and associated methods for providing data to the respective plurality of possible wireless service 
providers: and 

35 wherein said determining the wireless service provider for the portable computing device includes 

accessing the memory medium, using the received leno ion information to determine the wireless service 
provider m i I method & prodding the data to the wireless service provider, 

IS. The method of claim 17, wherein the dais structure stores a destination address indicating a 
40 destination specified by the wfrefes rvice provider; and 
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whereia said providing the data ooraprises providing the data to the destination specified by the wireless 
service provider. 

19. The method of claim 1, wherein the plurality of access points are maintained by a first wireless 
5 service provider; and 

wherein the ideatitication irdbrmation indicates a second wireless service prouder. 

20. She tethod claim 1 bereij h ,J< ifji tiott Monua^on compises a System ID, wherein me 
System H> uniquely identifies the wireless service provider of the p to alitj oi pos ible v, irek ss sen ice pro 1 t 

10 

21. The method of claim 1, wherein the identification information comprises an Extended Service Set 
ID (BSSED), wherein the ESS1D uniquely identifies the wireless service provider of the plurahtv ofpossibl rele 
service providers. 

15 22. The method of claim I , feriher comprising: 

the first access point receiving identification information from a portable computing device, wherein the 
identification information indicates a first wireless service provider of the plurality of possible wireless sendee 
providers; 

determining the first wireless service provider for the portable computing device after receiving the 
20 identification irmwration; 

the fust access point receiving data from the portable computing device; 

providing the data received from the portable computing device to a destination associated with the first 
wireless service provider; 

the first access point receiving identification information from a portable computing device, wherein the 
25 identification htibrmation indicates a second wireless service provider of the plurality of possible wireless service 
providers; 

determining the second wireless service provider for the portable computing device after receiving the 



the first a< cess poi ivbig data from the portable computing device; and 
30 providing the data received from the portable computing device to a destination associated with the second 

wireless service provider. 

23, The method of claim 1, 

wherein the plurality of access points are arranged at known locations in a geographic region, the method 
35 further comprising: 

the first access point providing geographic locatiot > ui indicating a fct iltic location of 

the portable computing device; 

wherein said providing network access comprises selectively providing network access to the portable 
comparing de vice based on the brown geographic location of the portable computing device. 
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24. The method of claim 1, 

wherein the plurality of access points ace arranged at known locations in a geographic region, fits method 
further comprising: 

fi» first access point providing geograph I > ( < n 'i'a known geographic location of 
S the portable computing device; and 

(fetennining as access level for the portable computing device after receiving the identification Morrnatkm; 

wherein said providing network access comprises selectively providing network access to the portable 
computing device based on the known geographic location of the portable computing device and the date-mined 
access level. 

10 

23. The method of claim 1, further comprising: 

detcmiriiii^. t level fort omputmg device after rec ivi the i I intbnnation; 

the first access point receiving data from the portable computing device; and 

providing the data received from the portable computing device to a destination based on the determined 
15 access level 

26. The method of claim 25, wherein said providing the data comprises: 

iro Sin he hi > • o) not trees on t! i f sork to allow the portable computing device access 
to the one or n id . soar then i level is a first access . ■ !, and 

20 providing the data to a destination for external access out of the network to only allow the portable 

computing device access to other networks if the access level is a second access level; 

wherein, if the access level is the second access level, (he data is not provided to the one or more resources 
on the network. 



25 27. The method of claim 2d, fin I he s p i m 

gning a « tmunica \ i > m n f i the tit p rat and the 



28. The method of claim 27, wherein the first access point assigns the wireless communication 
channel tor coajmunication between the first access point and the portable computing device, 

29. The method of claim 27, wherein said assigning comprises assigning the wireless eommtmicatton 
channel based on one or more of: 

■ g v-^'ice, 

thede&rmin dwi w *rv ice provider, or 

a determined access level for the portable comput levies w herem said determined access level is 
determined after receivin : tb idea ifieatkm Momattoo, 

30. A network system, comprising: 
a network; and 
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i is coupled to the net >rk vil c-j' each f i i \ ss points is 

ble f iii tl i I n 1 1 i < c i h 1 it | ) 

ih ft .J to it* sive idennfif anon information from the portable comput ng Je- ice indicating a wireless set sice 
provider of a plurality of possible wireless service providers; 
5 wherein each of the plurality of access points is operable to determine She wireless service provider 

indicated in toe ideiiti k o ( brmation: 

wherein network access is provided to fee portable computing device through She dciernhned wireless 
sen c:c provides. 

10 31. The network system of claim 30, wh t ... >int is operable to accommodate 

i I hoi 'i t vis tviceprovid 

32. The network system of claim 3 1 « further comprising; 

die fust a. a iluraliiy ufpowble S!D\ wheiem rj t h of the 

15 plurality of possible SIDs is associated with a respective one of the plurality of possible wireless service providers. 

33. The network system of claim 32, former comprising-. 

the first access point maintaining associations between the plurality of possible SEDs and the plurality of 
possible wirel en himJui 

20 

34. The network system of claim 32, further comprising: 

the last access point maintaining associations between the plurality of possible SIDs and a plurality of 
active subscribers. 

25 35, The network system of claim 31, farther comprising: 

fhe first access point broadcasting a plurality of possible SIDs, wherein each of the plurality of possible 
SIDs is ass e ifharesp t i of possible wireless service providers, 

36. The network system of claim 30, wherein said first access point is operable to function as a 
30 wirek s <> ss point lor each of the plurality of possible wireless service providers. 

37. The netw i ' tem of claim 30, wherein at least one of said plurality ol a< *s points i >mpri ss 
computer software which implements a plurality of virtual access points, wherein each viltaal access point 
corresponds to one of the pi I | wherein each virtual act loint 

35 provides network access services to the corresponding wireless service provider. 

38. The network system of claim 37, wherein each virtual access point provides access point 
acfeoiKiUty a tware, wl e i i] > I pp ears as a physical access point to tire 

portable computing device, 

40 
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39. The network system of claim 37, wherein each virtual ace point ( s es a wire! 
protocol stack. 



40, The network system of claim 39, whereifi the wireless protocol stack comprises at) IEEE 802.1 1 
5 protocol stack 

41, The network system of claim 37, wherein each virtual acce j < mi (AF) inel des an V: tended 
Service Set ID (ESSE)), and wherein each ESSE) corresponds to one of the plurality of possible wireless service 
providers. 

10 

42, The network system of claim 30, wherein each of the plurality of access points is operable to 
provide (wt 1 < a a destination based on the determined i rvit 
provider. 

15 43. The netwoi sn 1 Jaim 30, wherein the network system is useal by 5 bser ibers of each of 

the plurality of possible wireless service providers. 

44, The network system of claim 30, wherein the determined wireless service provider charges for 
access by the portable computing device to the network. 

20 

45 . The network system of claim 30, further comprising: 

a memory medium coupled to the network which stores a data structure comprising a list of identification 
information and a corresponding list of the plurality of possible wireless service providers; 

wherein, in determi i iiel id table computing d vie n. b of tlu 

25 plurality of access points is operable to access the memory medium and use the received identification rafonnafion 
to deter mm 1 , s service provider. 

46. The network system of claim 45, wherein the memory medium is comprised in one or more of the 
access points. 

30 

47. Trie network system of claim 30, further comprising: 

a memory medium coupled to the network which stores a data structure comprising a list of wireless service 
provider identification information, a corresponding list of the plurality of possible wireless service providers, and 
i txl rtieti jij - herespec plural r possible wi r pi kit s 

35 wheieim u> determining lis i „ provider for the portable computing device, each of the 

plurality ol ; >infa i >pe> ble to access tin- memoty medium, use the received wireless service provider 

identification information to determine the wireless service provider, and use an associated method for providing the 
data to the determined wireless service provider. 
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48. rbe network system < I v a ¥1 1 h< 1 ii ')> - i s m< i «'> » i i 1 nprised in < or mo >f 0 
access points, 

49. The network system of claim 47, 

5 wherein the data structure stores a destination address indicating a destination specified by tire determined 

wireless service provider; and 

wherein each of the plarality of access points is operable to provide the data to the destination specified by 
the determined c( provider. 

10 50. The network system of claim 49, wherein the plurality of access points are maintained by a first 

wireless service provider; and 

wherein the identification information it die 1 i . ;rviee provider, 

51. The network system of claim 30, wherein the identification ntformation compr^ saS tilD 
IS and wherein the System ID uniquely identifies a wireless service provider of the plurality of possible wireless 

service providers. 

52. The network system of claim 30, wherein the identification information comprises as Extended 
Service Set ID (KSSI1 >) i i.ei u h 1 SSD 1 m it) t * >< 5 mif «s the wireless sen. ee provider of the plarality of 

20 possible wireless service providers. 

53. ("h n voA sti at iin 5 forth t « mprausg 

a portahk is th» portable computing device includes the 

d£ iftcattoti information, wherein the identification information indicates a first wireless service provider of (he 
25 i >viders; 

wherein, when a first access point of the plurality of access points receive? the identification information 
from the portable computing device, the first access point is operable to determine the first wireless i e 
pro\ tder; and 

. k in the 1 % i point is operable t.» provide data received from the portable computing device 

30 according to the first wireless service provider. 

54. The iv i' r! syst t f claim 30, further comprising: 

one or more network devices coupled to the network, whereto each of die one or more network devices 
corresponds to one of the plurality of possibl - ' erviee providers; 
35 wherein each of the plurality of access points is operable to provide data received from the portable 

i i v ice corresponding to the determined wireless sendee provider. 

55. ! ' t 1 of claim 30, wherein each of fee plurality of 3 1 i 
provide fee data to the destination in a secure manner, 

40 
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56. The ■. tem of ckita 30, wherein &e ptorality of a< ess poiais ;« n rged at known 
locations in a geographic region, wherein, each access point is operable to provide geographic location information 
indicating a known geographic location of the portable computing device; and - 

wherein network access is selectively provided to the portable computing device based on the kuowa 
5 g ogi phi ftioiiof the portable computing! ice 

57. i >f claim 30, 

j I* access poinl ■ 1 i >ca(rans h graph t i t < 

further comprising; 

10 the first access point providing geographic location information indicating a known geographic location of 

i Uriah iputi Vict and 

deterniitiing aa access level for the portab 5 nputing d< I he identii s ) tarnation, 

. ) ad providing network access comprises selectively providing network access to fee portable 
computing device based on die known geographic location of die portable computing device and (lie deiermirted 

15 access level 

58. The network system of claim 30, wherein one or more of the plurality of access points are 
operable to: 

determine an access level for the portable computing device after receiving the identification information; 

20 and 

provide data received from the portable computing device to a destination based on ihe determined access 

level. 

59. The network system of claim 58, wherein, in providing the data, said one or more of the plurality 
2 5 of access points are operable to ; 

provide flics data to one or more resources on fee network to allow the portable confuting devke access to 
the one or more resources on die network if the access level is a first access level; and 

provide the data to a destination for external access oat of the network to only allow the portable 
computing device access to other networks if the access level is a second access level; 
39 wherein, if the access level is the second access level, the data is not provided to the one or more resources 

on fee network. 

60. the tit n ' herein cat cess points is operab gn a wi 
communication channel for commumcr 51 veen the fit point and the portable computing device. 

35 

61. Thi t ;n of claim 30, wherein one or mo i i i '• to assign 
me wireless communication channel based on one or more of: 

deatifieat ia i J > t t f 1 f 

• l ! determined wirel is service provider, or 
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a determined access level for the portable comptio% device, wherein said access level is determine I by 
<m of said one or more of fire access points after receiving the identification information. 

62. \ met! id for providing m i i attires cm a wireless net o i tea ' rein the wireless 
5 network system includes a plurality of access points coupled to a network, the method comprising: 

a fust access point receiving identification information from a portable computing device in a wireless 
m inner, vt itifk ttkm information itdfcatcs a wo^ ess ider of <i piuralitj oi p 

> >rovide) 

cfetenmBing a wireless service provider tor the portable computing device after r« t the tt >> < t « ,n 
10 information; 

the first access poin n \ Lug d rta from the portable computing device in a wireless manner; and 
providing the data received from the portable computing device to a destination, based on the determined 
■wireless service provider. 

15 63. The method of claim 62, wherein said first access point is operable to accommodate subscribers of 

each of the plurality of possible wireless service providers. 

64. The method of claim 63, further comprising: 

the first access point recognizing a System ID (SID) of a plurality of possible SIDs. wherein each of tbe 
20 plurality of possible SIDs :is associated with a respective one of die plurality of possible wireless service providers. 

65. The- method of claim 64, further comprising; 

the first access point masaiainiog associations between foe plurahiy of possible SIDs and the plurality of 
possible wireless service providers. 

25 

66. Tbe method of claim 64, farther comprising: 

the first access point maintaining associations between the plurality of possible SIDs and a plurality of 
active subscribers. 

30 67. The method of claim 63, further comprising: 

the first access point broadcasting a plurality of possible SIDs, wherein each of the plurality of possible 
D iciated wit! espi c one of me plurality of possible wireless service providers, 

6S, The method of claim 62, wherein said first access point is operable to function as a wireless 
35 service provider access point for each of the plurality of possible wireless service providers. 

69. The method of claim 62, wherein said Erst access point comprises computer software which 
implements a plurality of virtual access points, wherein each virtaal access point corresponds to one of the plurality 
i < rs, and wherein each virtual a,... ss i '5 the 

40 corresponding wireless service provider. 
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70. The method of claim 69, wherein each virtual access point ptxn ides a n functionality 
implemented m software, wherein each virtual access point appears as a physical access point to 3» portable 
comparing device. 

5 

71. The method of claim 69, wherein each virtual access point (AP) ex< it. t wb leas protocol 

stack. 

72. The method of claim 71, wherein fee wireless protocol stack comprises aa IEEE 802. 1 1 -wireless 
10 protocol stack, 

73. The method of claim 69, wherein each virtual access point (AP) iaclu ies at u sided Service Set 
ID (ESS3B), and wherein each ESSID conesponds to one of the pluralny >fj »ssib! vir< - - > ice provider 

15 74. The method of claim 62, wherein the wireless network system is a distributed wireless network 



75. The method of claim 62, wherein the network system is useable by subscribers of each of the 
plurality of po Mt > i sservi iroviders. 

20 

76. i Ih hod of dawn 6 irfh i r c i 1 

majstairirag and storing a usage amount by the portable computing device; 

wherein the detenaiaed wireless sendee provider charges for access by the portable computing device to 
the network. 

25 

77. The method of claim 62, wherein the network system includes a memory medium which stores a 
data structure comprising a list of identification information and a corresponding list of the phirality of possible 
wireless service providers; and 

wherein ««d f tarn i die wireless service provider for the portable computing device includes 
30 accessing Ihe memory medium and asing U * » ■ nformation to determine the wireless service 

provider, 

78. The method of claim 62, wherein the plurality of access points are maiatasned by a fast wireless 
service provider; and 

35 h i provide* 

79. The ' 1 i j i t i i in L nip Sysfei j 
the System ID uniquely identifies tlie wireless service provider of the plurality of possible wireless service 
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80. The method of clam; 62, wherein the identi&catiott informati >» cojkt n - an dended Service 
t ID (ESSIl rein the ESS ID uniquely i 1 p of possib 

wireless service providers. 

5 81. The method of claim 62, 

wherein the plurality of access points are arranged at known locations in a geographic region, the method 
farther comprising: 

the first access point providing geographic location information indicating a known, geographic location of 
the portable computing device; 
10 wherein said providing network access comprises seiecth providing n wori access to the po tal la 

computing device based on the known geographic location of Hie portable computing device. 

82. The method of claim 62, 

wherein the plurality of access points are arranged at known locations in a geographic region, die method 
15 further comprising-. 

the fast access point providing geographic location raferaatton indicating a known geographic location of 
fee portable computing device; and 

determining an access level for fee portable computing device after receiving the identification information; 

wherein said providing network access comprises selectively providing network access to toe portable 
20 computing de vice based on the known geographic location of the portable computing device and the determined 
access level. 

S3, The method of claim 62, further comprising; 

determining an access level for the portable computing device after receiving toe identification information; 
25 the Stst access point receiving data from the portable computing device; and 

providing She data received from the portable computing device to a destination based on the determined 
access level. 
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